On 02/05/2018 16:29, Sven Van Caekenberghe wrote:
> Hi Cyril,
>

Thank you for the infos and the fast reply :)

> You can run a ZnSecureServer with a specific certificate. See the class comment. But, this is a bit experimental, you need a very specific certificate and I have only seen it work on Linux.
>

Good to know!

> If you front you Seaside app with Nginx, I assume you are doing HTTPS -> HTTP in Nginx. I would suggest you try doing WWS -> WS as well. This does mean that connections are kept open of course (implicit in WebSockets). I have not yet done this myself, but it should work theoretically.
>

This is what I do now and it works fine. I just wanted to know if there
was an alternative to write it in the documentation of the project
(since it will be open source).

> The thing is, you will find 100x more info on (correct) TLS/SSL setup on Nginx, and app proxying is totally accepted today.
>

Ok, so I'll probably just give an example with nginx in the documentation :)

> Please let us know how it goes ;-)
>
> Sven
>
>


--
Cyril Ferlicot
https://ferlicot.fr